rodauth-oauth 0.10.0 → 0.10.1

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: f9b68ff6e15b91128db72a07fa91b86afb70352f9582fa8c27e7abfe3c0dc17c
4
- data.tar.gz: 1c35b67bc10619c8de31cbcef514636e7975307a0cfc02585ae10ec97de74be1
3
+ metadata.gz: 9a8ec41b29b514398bc764c53190df1b832387e1c392dd4c03988ffc16bdf0c5
4
+ data.tar.gz: 565c9ebb6871cd7a36b2ddf549cd368c509bce9303fb308cda4620d96a191647
5
5
  SHA512:
6
- metadata.gz: 2cf0e357529093b45834697c54bae5eaf17419885e04ccba279d18e65464aa8d8fb2e49da09dd5c96c83331e0f60915e993af5dfc7decfff4c8752b5401dfe8a
7
- data.tar.gz: 784d5184526ff8dcbc3c112eb58311705baf82e1bf17b40b87cd55dc43f0b06cc6bf7c2cb71f67caf315008b14d3fe4b9fe8eea991a0475586bf4effb0d77ed3
6
+ metadata.gz: 724c9d6bf98689b63f1919ea9e513907c784152b7a164797e152f6cf5c9bacf19364bf8ea0df8dd3b03f281f2190eaafb0927d70d040e1c636eea8e7a4846269
7
+ data.tar.gz: f89c6dea666c7bfe2b8722d84cbc04cf38c42dc9827df4ec05596d490dc73cbd0f1ac3e57adf358a564dc37ef774f913df383192ee63771a91a6cdc454d35c4e
@@ -0,0 +1,5 @@
1
+ ### 0.10.1 (20/06/2022)
2
+
3
+ #### Bugfixes
4
+
5
+ * refresh token grant logic wasn't scoping the token to be revoked/retokened, which was a bug introduced in a recent refactoring (commit 83e3f183f6c9941d37c8fe8cfd3fc258ab9c576a).
@@ -4,7 +4,7 @@
4
4
 
5
5
  * Fixed remaining namespacing fix issues requiring usage of `require "rodauth-oauth"`.
6
6
  * Fixed wrong expectation of database for resource-server mode when `:oauth_management_base` plugin was used.
7
- * oidc: fixed incorrect grant creation flow whenn using `nonce` param.
8
- * oidc: fixed jwt encoding regression when not setting encryption method/algorithmm for client applications.
7
+ * oidc: fixed incorrect grant creation flow when using `nonce` param.
8
+ * oidc: fixed jwt encoding regression when not setting encryption method/algorithm for client applications.
9
9
  * templates: added missing jwks field to the "New oauth application" form.
10
10
  * Several fixes on the example OIDC applications, mostly around CSRF breakage when using latest version of `omniauth`.
@@ -1,4 +1,4 @@
1
- ### 0.9.2 (30/05/2022)
1
+ ### 0.9.3 (30/05/2022)
2
2
 
3
3
  #### Bugfixes
4
4
 
@@ -589,7 +589,7 @@ module Rodauth
589
589
  redirect_response_error("invalid_grant") unless token_from_application?(oauth_token, oauth_application)
590
590
 
591
591
  rescue_from_uniqueness_error do
592
- oauth_tokens_ds = db[oauth_tokens_table]
592
+ oauth_tokens_ds = db[oauth_tokens_table].where(oauth_tokens_id_column => oauth_token[oauth_tokens_id_column])
593
593
  access_token = _generate_access_token(update_params)
594
594
 
595
595
  if oauth_refresh_token_protection_policy == "rotation"
@@ -2,6 +2,6 @@
2
2
 
3
3
  module Rodauth
4
4
  module OAuth
5
- VERSION = "0.10.0"
5
+ VERSION = "0.10.1"
6
6
  end
7
7
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: rodauth-oauth
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.10.0
4
+ version: 0.10.1
5
5
  platform: ruby
6
6
  authors:
7
7
  - Tiago Cardoso
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2022-06-10 00:00:00.000000000 Z
11
+ date: 2022-06-20 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: rodauth
@@ -40,6 +40,7 @@ extra_rdoc_files:
40
40
  - doc/release_notes/0_0_5.md
41
41
  - doc/release_notes/0_0_6.md
42
42
  - doc/release_notes/0_10_0.md
43
+ - doc/release_notes/0_10_1.md
43
44
  - doc/release_notes/0_1_0.md
44
45
  - doc/release_notes/0_2_0.md
45
46
  - doc/release_notes/0_3_0.md
@@ -72,6 +73,7 @@ files:
72
73
  - doc/release_notes/0_0_5.md
73
74
  - doc/release_notes/0_0_6.md
74
75
  - doc/release_notes/0_10_0.md
76
+ - doc/release_notes/0_10_1.md
75
77
  - doc/release_notes/0_1_0.md
76
78
  - doc/release_notes/0_2_0.md
77
79
  - doc/release_notes/0_3_0.md